{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f483c7f-5094-54ce-a8e5-74a357ac2242",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-juli",
      "version": "8.5.100-tuxcare.9",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2a25d1d6-852a-5647-876d-2c3a6a55b192",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7bcfb10-f50c-5ea9-8ebf-c2456a51b253",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78b94f59-a92f-5e43-a032-a0fb6a2ee1ef",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a64c58-b946-563b-a555-d5a7f3c9c4b0",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ce83c5a-5fa6-5b84-b10a-3c13e9a5e7bc",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07fcafc8-7e6d-521f-bf97-1d1e9d858d4a",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cef5837-0f24-5944-b70b-514ce96b0b42",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da2f16dd-0f82-59db-bdfa-c71360eab97d",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e4c143-b861-5f5a-9125-791f98786d70",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aad70e6-ec43-5338-9283-44f865cc6599",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:830b3ebb-e7d0-5d91-ae29-39fdd8cdba2c",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66b18cee-537d-5f6a-8069-5a15fb10fdcb",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cedaa70a-735b-533f-928d-ce2ec08baece",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfc3ed56-3dc1-5fc8-a8a1-ed37389669ec",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a442393-ab1f-5962-bf5d-44db23864eed",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea893e28-70c3-5a0a-b751-3e18d5693722",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a92d09e-ae95-534e-a98b-2c15766bc408",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3377ebbb-5f2f-5500-8e6b-693c01573164",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62b1e52b-d9cc-52fa-b7c5-337caa18fc2f",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7a8a2fc-a729-5f36-bfa3-8291ff99338b",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adf8b5b3-8111-56f0-b4a5-34104b50b09b",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7443283b-a494-5ca3-b9e1-a647145a80b1",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-8014 does not affect version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli. Tomcat Version 8.5.100 is not vulnerable to CVE-2018-8014. Confirmed by manual code inspection and security advisories."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab98968b-b619-5ec8-84e3-7305ad1b7f5e",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-8034 does not affect version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli. Tomcat Version 8.5.100 is not vulnerable to CVE-2018-8034. Confirmed by manual code inspection and security advisories."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3c452ff-34c9-5a2e-83f9-4c8eed7c98b3",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dc0a093-96e7-501a-902d-02b91301a332",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5ada7a2-1afa-582b-8305-ee84de738884",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:024f8b1b-7722-55b9-8afb-40cd6ed12f95",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-juli 8.5.100-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83968313-cace-56b3-af7a-f425e6db7389",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6de2f094-0f36-5c34-b68c-9ffc9738bdca",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e4832a2-21bd-5a05-9ce5-562d52af9843",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04f025f8-3a85-51dd-870b-6f427b999815",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c98f9fd-98d3-5c92-8194-4a5a161698d5",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:468085ef-8b5f-52ec-b101-bd9eba663157",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6752c6e-4b1a-5040-8535-7391a683460d",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3bd5097-940b-5e86-a0da-271d3ece120b",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ea4af91-5175-504f-bd23-446d54f0ad69",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27f0e4ef-936b-5a82-959d-f433f02a3431",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:982b1772-9c6b-5666-8f9a-b681bcbc2479",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:064e8a44-b253-5aca-9034-884e6f80677a",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f6be441-2acf-53bf-89fe-c2428b281981",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:003c8a4e-7984-5844-a947-6a2e6c023fe5",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72126444-c9a5-5910-8cad-b057c8134bac",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5936733a-7378-50e5-8bb6-8b80da673652",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8eab80a-9279-5d96-98f9-994d9518a778",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b488eb5a-ef7a-5030-b24a-89cdd6a962dd",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96f24a74-2289-5cd3-96cf-4a35f94a276a",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb024174-4b54-5960-8013-a391ab3f4ce9",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a116f582-4c54-588d-a2eb-340acc991fc3",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9297ef3-0ca2-5b78-b23b-56b753980ae7",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:923a5077-c6e1-5671-92c3-025490f7a2a5",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1ced918-1f37-5418-94fc-158529b5ea7f",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecdb5560-d156-51e1-bf9e-8cfd231fd126",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c6db9d-e7ba-5513-befa-d62fccb2627a",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:680ebea6-373b-5ba4-9022-bb7d949c24a1",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bf3fee8-f113-5c9c-bd80-bd417a78eb5f",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6926a00e-6534-5a5b-bb9a-dcfeb9bae500",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e633d10b-dccb-50e9-902e-34a4e2ef9f1c",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42f75508-50e6-5d77-83d2-c5ddb5b897e1",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3e4b94f-3ca1-579e-9dfd-7e0e75520c64",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03c30b84-70be-5da0-9c5e-7747a553ccc7",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:559c941b-e4cf-50cc-8445-33f33ed1c703",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 8.5.100-tuxcare.9 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.100-tuxcare.9"
    }
  ]
}